| us.ri.logicnow.com/proxy_public_file/maxri-runtimedownloads-production/runtime_downloads/downloads/000/000/008/original/iscanruntime.exe?1664203898 |  44.238.164.168 | 200 OK | 2.6 MB |
URL User Request GET HTTP/2us.ri.logicnow.com/proxy_public_file/maxri-runtimedownloads-production/runtime_downloads/downloads/000/000/008/original/iscanruntime.exe?1664203898 IP44.238.164.168:443
CertificateIssuerAmazon Subjectus.ri.logicnow.com Fingerprint21:0D:EB:B3:04:90:1C:A1:F9:E0:BA:1A:1D:6D:1D:8F:1A:08:32:47 ValidityMon, 20 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typePE32 executable (console) Intel 80386, for MS Windows, 6 sections Size2.6 MB (2575000 bytes) Hash8ff3eeac7c0327b39bc90bc34f26ebdb 7f533541bdd0d72256bff15c7c5feb5f57e09cb8 d082b9ab3805890902f739b168f5e13df81ebf195ba7939260cac508f40a8037
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /proxy_public_file/maxri-runtimedownloads-production/runtime_downloads/downloads/000/000/008/original/iscanruntime.exe?1664203898 HTTP/1.1
Host: us.ri.logicnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=UgpcvwK8oEo2qtWRSyeXRHyXC7H7Zaz3gj1icE5wtDhnEzyq9GuDjU9HWX2gd0cqiL0su0DwRPGG18jnbD7Rrw%3D%3D; _my_app_session=40e83106ee098affd10cbc77b14f4644
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 16:57:44 GMT
content-type: application/octet-stream
content-length: 2575000
server: nginx/1.16.0
last-modified: Mon, 26 Sep 2022 14:51:39 GMT
etag: "8ff3eeac7c0327b39bc90bc34f26ebdb"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
| us.ri.logicnow.com/download/iscanruntime.exe | 44.238.164.168 | 302 Found | 2.6 MB |
URL User Request GET HTTP/2us.ri.logicnow.com/download/iscanruntime.exe IP44.238.164.168:443
CertificateIssuerAmazon Subjectus.ri.logicnow.com Fingerprint21:0D:EB:B3:04:90:1C:A1:F9:E0:BA:1A:1D:6D:1D:8F:1A:08:32:47 ValidityMon, 20 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
Size2.6 MB (2575000 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download/iscanruntime.exe HTTP/1.1
Host: us.ri.logicnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 16:57:44 GMT
content-type: text/html; charset=utf-8
location: https://us.ri.logicnow.com/proxy_public_file/maxri-runtimedownloads-production/runtime_downloads/downloads/000/000/008/original/iscanruntime.exe?1664203898
server: nginx/1.16.0
x-frame-options: ALLOWALL
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
p3p: CP="iScan"
p3p-policyref: /w3c/p3p.xml
vary: Accept-Encoding
content-encoding: gzip
cache-control: no-cache
set-cookie: XSRF-TOKEN=UgpcvwK8oEo2qtWRSyeXRHyXC7H7Zaz3gj1icE5wtDhnEzyq9GuDjU9HWX2gd0cqiL0su0DwRPGG18jnbD7Rrw%3D%3D; path=/; secure
_my_app_session=40e83106ee098affd10cbc77b14f4644; path=/; secure; HttpOnly
x-request-id: 4bb6ef05-c0f8-4cd7-9ec0-5ca4be832a12
x-runtime: 0.021897
strict-transport-security: max-age=63072000; includeSubDomains
x-trace: 2B593EB8F094D78C7CAEA661A73235FFF33F726F84CC4141EEBB93F74E00
X-Firefox-Spdy: h2
|